5.3
Medium
CVE-2018-15446 A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive…
Description
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper protections on data that is returned from user meeting requests when the Guest access via ID and passcode option is set to Legacy mode. An attacker could exploit this vulnerability by sending meeting requests to an affected system. A successful exploit could allow the attacker to determine the values of meeting room unique identifiers, possibly allowing the attacker to conduct further exploits.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Meeting Server | Versions not published |
References
- 20181107 Cisco Meeting Server Information Disclosure Vulnerability tools.cisco.com
- 105856 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Meeting Server
The 9 CVEs of Cisco Meeting Server →
CVE-2023-20255
A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.3
Medium
CVE-2021-40122
A vulnerability in an API of the Call Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote…
5.9
Medium
CVE-2021-1524
A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of…
4.3
Medium
CVE-2020-3160
A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) feature of Cisco Meeting Server software…
5.3
Medium